Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/NSPF5FCZwgx34oBtxRU2zMdts_E.roa
File: NSPF5FCZwgx34oBtxRU2zMdts_E.roa (raw, json)
Hash identifier: G9Wa4uMT2xz0XdxpG83EwOmAvwgfabFfUsiAzL7UYxs=
Subject key identifier: 35:23:C5:E4:50:99:C2:0C:77:E2:80:6D:C5:15:36:CC:C7:6D:B3:F1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE77966D8964953EC925E5AF541538
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/NSPF5FCZwgx34oBtxRU2zMdts_E.roa
Signing time: Mon 02 Jan 2023 09:44:43 +0000
ROA not before: Mon 02 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45650
IP address blocks: 45.139.188.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:77:96:6d:89:64:95:3e:c9:25:e5:af:54:15:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3523c5e45099c20c77e2806dc51536ccc76db3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:f8:ea:f5:3c:05:4d:a3:64:bb:ed:e8:a2:
50:c1:88:da:dc:88:79:66:e8:e1:05:e5:fb:2f:f5:
e4:f3:10:59:fa:b9:c5:ca:b3:97:be:6c:16:db:63:
c6:06:1f:03:ff:8f:2e:c5:60:9e:8b:8e:84:f7:01:
a8:3f:a6:7e:5f:ea:aa:a6:c5:af:6d:b7:07:06:fd:
4b:78:78:41:45:0c:28:10:ae:7f:ad:6e:f8:bb:74:
34:d6:62:cf:6b:82:7b:02:e2:65:67:2d:df:03:23:
f9:f5:61:cd:d1:84:3a:55:14:26:d2:37:8e:fc:8f:
37:aa:67:38:f9:4a:1e:18:29:04:ba:e4:95:2d:df:
2d:e9:6b:56:1e:52:f4:4f:5c:c7:23:3d:b3:5b:5a:
e1:da:9f:60:ea:55:d3:9f:83:ad:77:e6:f0:7a:2a:
89:54:cd:c9:84:74:28:8b:52:f7:83:ea:ba:ea:12:
d3:63:ed:0a:a5:2a:07:45:58:da:1a:c9:34:d3:ae:
4a:8d:8d:17:2d:57:8a:ae:3d:cf:74:1c:0d:4a:7f:
de:51:8a:59:35:11:aa:1d:13:b2:77:0c:db:76:56:
56:3a:96:b6:37:94:3f:8a:9f:c4:dc:cf:6c:b8:1a:
73:34:41:58:b4:bf:13:d3:76:54:5b:3b:81:6c:5c:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:C5:E4:50:99:C2:0C:77:E2:80:6D:C5:15:36:CC:C7:6D:B3:F1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/NSPF5FCZwgx34oBtxRU2zMdts_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.188.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e7:b5:bf:75:bf:ca:0b:9e:b1:82:8a:63:13:35:0e:e2:a5:
fe:f4:fa:9e:df:36:88:fc:e5:a1:7a:04:d4:05:3f:c5:56:25:
5f:45:56:3a:d6:cd:d3:ed:17:a7:5a:a3:c0:46:55:4f:b4:37:
24:16:e1:4f:e7:cd:35:62:aa:19:48:14:be:95:76:27:bf:35:
64:21:95:9c:a9:2f:a4:14:cd:2c:58:09:8e:57:cb:24:24:d7:
f5:f1:96:1e:5f:cf:8c:27:58:ae:be:83:d8:6b:ba:b3:27:7f:
b9:60:19:df:38:1a:7b:14:43:90:4d:f5:64:b7:ac:84:85:37:
4a:b1:a6:4e:30:11:54:b6:aa:95:5a:24:0c:a6:15:51:9f:2c:
90:29:65:16:f3:08:72:5a:b9:95:91:56:c3:7c:29:28:af:ff:
ad:52:a4:0b:1e:06:90:d5:57:85:4b:d7:b4:81:84:5f:d4:6f:
a5:78:b1:3d:00:b3:3d:42:b9:ac:4b:67:c7:c1:ff:0d:ec:a0:
0e:1a:3f:f0:25:d8:e3:9f:44:4d:ee:ee:6a:26:99:9c:65:7f:
1e:ae:25:ab:a0:c0:c7:6a:ce:9c:3e:7d:49:66:12:86:3c:a9:
c9:fb:c8:ff:69:60:59:3a:ad:58:98:f9:29:b8:55:5c:57:33:
e2:3d:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org